Even though refusing to use SHA-1 is silly—it's a 20-year-old hash function that's supported by thousands of programs—it would be a good idea to display the MD5 hash as well. In case there were an incorrect MD5 hash in the database, it could be seen and corrected without having the download the DAT.

For each source you can decide to fill the dumper or the project field (or both or none).
You can set unknown dumper and GoodTools project as source of information.
You can set asapy NDS dumper affiliated to No-Intro and asapy PSP dumper affiliated to Redump.org

At the moment "dumper" data is in database but is hidden by default until I unset the privacy flag.